Windows Event Log Monitor Question

Monitoring Event Logs in SAM is a fairly straightforward process. You'll want to create a new application template with a Windows Event Log Monitor configured similarly to the image below. Then apply this application template to your SQL servers you'd like monitored.

Similar to SCOM, SAM when this entry is found in the Windows Event Log SAM will write an Orion Event that can be cleared/acknowledged once the issues has been resolved.

Thanks. I added the settings you posted. I still do not get the event description.

I sent a test event from a monitored node (using the command below) and it showed up on Events page..

EVENTCREATE /T ERROR /ID 1000 /L APPLICATION /SO MSSQLSERVER2 /D "My Test Event"

But I did not see the event description "My Test Event" in SAM. I would like the event description so that we know which SQL database failed to back up. Is there a way to get it to display when the monitor is down?

Thanks.

Understood. Including the event description as part of the alert if not yet possible in SAM today. This is a feature we're currently working on. If you'd like an early preview of the next version of SAM then please sign-up here to receive the beta.

If you don't want to wait there are ways to accomplish this now.  I wrote my own powershell script to do this (but didn't publish due to the amount of customizations done for our organization) but there is another user who wrote one as well. 

Hi aLTeReGo‌, I'm currently using the Error Application Template but, there's no Event Log Message Details show though there are plenty of logs found on the Real Time Event Log Viewer. I already changed "Any log" of the "Log to monitor" field. Any advice? Thank you.

There should be macro "WindowsEventMessages" resp. ${N=SwisEntity;M=ComponentAlert.WindowsEventMessages} that contains details including messages of up to 10 events matched during last poll. Would not that work for you?

Hi, I attempted to use this template but I found an error about the Mircosoft VBScript runtime error: Path not found.

I would strongly recommend using the following application template instead.

• Errors in Application Event Log

Hi aLTeReGo is this the same with the Errors in Application Event Log template from the default template of SAM?

If yes,  I'm already using this but, there's no Event Log Message Details show though there are plenty of logs found on the Real Time Event Log Viewer. I already changed "Any log" of the "Log to monitor" field. Any advice?

Just for an update, upon checking my event log Message has been populated